280 lines
10 KiB
Python
280 lines
10 KiB
Python
import logging
|
||
|
||
from django.conf import settings
|
||
from django.contrib.auth.hashers import check_password, make_password
|
||
from django.core.cache import cache
|
||
from django_celery_beat.models import PeriodicTask
|
||
from django_filters.rest_framework import DjangoFilterBackend
|
||
from rest_framework import status
|
||
from rest_framework.decorators import action
|
||
from rest_framework.filters import OrderingFilter, SearchFilter
|
||
from rest_framework.mixins import (CreateModelMixin, DestroyModelMixin,
|
||
ListModelMixin, RetrieveModelMixin,
|
||
UpdateModelMixin)
|
||
from rest_framework.pagination import PageNumberPagination
|
||
from rest_framework.parsers import (FileUploadParser, JSONParser,
|
||
MultiPartParser)
|
||
from rest_framework.permissions import IsAuthenticated
|
||
from rest_framework.response import Response
|
||
from rest_framework.views import APIView
|
||
from rest_framework.viewsets import GenericViewSet, ModelViewSet
|
||
from rest_framework_simplejwt.tokens import RefreshToken
|
||
|
||
from utils.queryset import get_child_queryset2
|
||
|
||
from .filters import UserFilter
|
||
from .mixins import CreateUpdateModelAMixin
|
||
from .models import (Dict, DictType, File, Organization, Permission, Position,
|
||
Role, User)
|
||
from .permission import RbacPermission, get_permission_list
|
||
from .permission_data import RbacFilterSet
|
||
from .serializers import (DictSerializer, DictTypeSerializer, FileSerializer,
|
||
OrganizationSerializer, PermissionSerializer,
|
||
PositionSerializer, RoleSerializer, TaskSerializer,
|
||
UserCreateSerializer, UserListSerializer,
|
||
UserModifySerializer)
|
||
|
||
logger = logging.getLogger('log')
|
||
# logger.info('请求成功！ response_code:{}；response_headers:{}；response_body:{}'.format(response_code, response_headers, response_body[:251]))
|
||
# logger.error('请求出错-{}'.format(error))
|
||
|
||
|
||
class LogoutView(APIView):
|
||
permission_classes = []
|
||
|
||
def get(self, request, *args, **kwargs): # 可将token加入黑名单
|
||
return Response(status=status.HTTP_200_OK)
|
||
|
||
class TaskViewSet(ModelViewSet):
|
||
queryset = PeriodicTask.objects.all()
|
||
serializer_class = TaskSerializer
|
||
search_fields = ['name']
|
||
filterset_fields = ['enabled']
|
||
ordering = ['-pk']
|
||
|
||
|
||
|
||
class DictTypeViewSet(ModelViewSet):
|
||
"""
|
||
数据字典类型-增删改查
|
||
"""
|
||
perms_map = {'get': '*', 'post': 'dicttype_create',
|
||
'put': 'dicttype_update', 'delete': 'dicttype_delete'}
|
||
queryset = DictType.objects.all()
|
||
serializer_class = DictTypeSerializer
|
||
pagination_class = None
|
||
search_fields = ['name']
|
||
ordering_fields = ['pk']
|
||
ordering = ['pk']
|
||
|
||
|
||
class DictViewSet(ModelViewSet):
|
||
"""
|
||
数据字典-增删改查
|
||
"""
|
||
perms_map = {'get': '*', 'post': 'dict_create',
|
||
'put': 'dict_update', 'delete': 'dict_delete'}
|
||
# queryset = Dict.objects.get_queryset(all=True) # 获取全部的,包括软删除的
|
||
queryset = Dict.objects.all()
|
||
filterset_fields = ['type', 'is_used', 'type__code']
|
||
serializer_class = DictSerializer
|
||
search_fields = ['name']
|
||
ordering_fields = ['sort']
|
||
ordering = ['sort']
|
||
|
||
def paginate_queryset(self, queryset):
|
||
"""
|
||
如果查询参数里没有page但有type或type__code时则不分页,否则请求分页
|
||
"""
|
||
if self.paginator is None:
|
||
return None
|
||
elif (not self.request.query_params.get('page', None)) and ((self.request.query_params.get('type__code', None)) or (self.request.query_params.get('type', None))):
|
||
return None
|
||
return self.paginator.paginate_queryset(queryset, self.request, view=self)
|
||
|
||
@action(methods=['get'], detail=False, permission_classes=[], authentication_classes=[],url_name='correct_dict')
|
||
def correct(self, request, pk=None):
|
||
for i in Dict.objects.all():
|
||
i.save()
|
||
return Response(status=status.HTTP_200_OK)
|
||
|
||
class PositionViewSet(ModelViewSet):
|
||
"""
|
||
岗位-增删改查
|
||
"""
|
||
perms_map = {'get': '*', 'post': 'position_create',
|
||
'put': 'position_update', 'delete': 'position_delete'}
|
||
queryset = Position.objects.all()
|
||
serializer_class = PositionSerializer
|
||
pagination_class = None
|
||
search_fields = ['name','description']
|
||
ordering_fields = ['pk']
|
||
ordering = ['pk']
|
||
|
||
|
||
class TestView(APIView):
|
||
perms_map = {'get': 'test_view'} # 单个API控权
|
||
pass
|
||
|
||
|
||
class PermissionViewSet(ModelViewSet):
|
||
"""
|
||
权限-增删改查
|
||
"""
|
||
perms_map = {'get': '*', 'post': 'perm_create',
|
||
'put': 'perm_update', 'delete': 'perm_delete'}
|
||
queryset = Permission.objects.all()
|
||
serializer_class = PermissionSerializer
|
||
pagination_class = None
|
||
search_fields = ['name']
|
||
ordering_fields = ['sort']
|
||
ordering = ['pk']
|
||
|
||
|
||
class OrganizationViewSet(ModelViewSet):
|
||
"""
|
||
组织机构-增删改查
|
||
"""
|
||
perms_map = {'get': '*', 'post': 'org_create',
|
||
'put': 'org_update', 'delete': 'org_delete'}
|
||
queryset = Organization.objects.all()
|
||
serializer_class = OrganizationSerializer
|
||
pagination_class = None
|
||
search_fields = ['name', 'method']
|
||
ordering_fields = ['pk']
|
||
ordering = ['pk']
|
||
|
||
|
||
class RoleViewSet(ModelViewSet):
|
||
"""
|
||
角色-增删改查
|
||
"""
|
||
perms_map = {'get': '*', 'post': 'role_create',
|
||
'put': 'role_update', 'delete': 'role_delete'}
|
||
queryset = Role.objects.all()
|
||
serializer_class = RoleSerializer
|
||
pagination_class = None
|
||
search_fields = ['name']
|
||
ordering_fields = ['pk']
|
||
ordering = ['pk']
|
||
|
||
|
||
class UserViewSet(ModelViewSet):
|
||
"""
|
||
用户管理-增删改查
|
||
"""
|
||
perms_map = {'get': '*', 'post': 'user_create',
|
||
'put': 'user_update', 'delete': 'user_delete'}
|
||
queryset = User.objects.all()
|
||
serializer_class = UserListSerializer
|
||
filterset_class = UserFilter
|
||
search_fields = ['username', 'name', 'phone', 'email']
|
||
ordering_fields = ['-pk']
|
||
|
||
def get_queryset(self):
|
||
queryset = self.queryset
|
||
if hasattr(self.get_serializer_class(), 'setup_eager_loading'):
|
||
queryset = self.get_serializer_class().setup_eager_loading(queryset) # 性能优化
|
||
dept = self.request.query_params.get('dept', None) # 该部门及其子部门所有员工
|
||
if dept is not None:
|
||
deptqueryset = get_child_queryset2(Organization.objects.get(pk=dept))
|
||
queryset = queryset.filter(dept__in=deptqueryset)
|
||
return queryset
|
||
|
||
def get_serializer_class(self):
|
||
# 根据请求类型动态变更serializer
|
||
if self.action == 'create':
|
||
return UserCreateSerializer
|
||
elif self.action == 'list':
|
||
return UserListSerializer
|
||
return UserModifySerializer
|
||
|
||
def create(self, request, *args, **kwargs):
|
||
# 创建用户默认添加密码
|
||
password = request.data['password'] if 'password' in request.data else None
|
||
if password:
|
||
password = make_password(password)
|
||
else:
|
||
password = make_password('0000')
|
||
serializer = self.get_serializer(data=request.data)
|
||
serializer.is_valid(raise_exception=True)
|
||
instance = serializer.save(password=password)
|
||
from apps.employee.models import Employee
|
||
Employee.objects.create(user=instance,create_by=request.user)
|
||
return Response(serializer.data)
|
||
|
||
def perform_update(self, serializer):
|
||
instance = serializer.save()
|
||
from apps.employee.models import Employee
|
||
if not Employee.objects.filter(user=instance).exists():
|
||
Employee.objects.create(user=instance,create_by=self.request.user)
|
||
|
||
@action(methods=['put'], detail=False, permission_classes=[IsAuthenticated], # perms_map={'put':'change_password'}
|
||
url_name='change_password')
|
||
def password(self, request, pk=None):
|
||
"""
|
||
修改密码
|
||
"""
|
||
user = request.user
|
||
old_password = request.data['old_password']
|
||
if check_password(old_password, user.password):
|
||
new_password1 = request.data['new_password1']
|
||
new_password2 = request.data['new_password2']
|
||
if new_password1 == new_password2:
|
||
user.set_password(new_password2)
|
||
user.save()
|
||
return Response('密码修改成功!', status=status.HTTP_200_OK)
|
||
else:
|
||
return Response('新密码两次输入不一致!', status=status.HTTP_400_BAD_REQUEST)
|
||
else:
|
||
return Response('旧密码错误!', status=status.HTTP_400_BAD_REQUEST)
|
||
|
||
# perms_map={'get':'*'}, 自定义action控权
|
||
@action(methods=['get'], detail=False, url_name='my_info', permission_classes=[IsAuthenticated])
|
||
def info(self, request, pk=None):
|
||
"""
|
||
初始化用户信息
|
||
"""
|
||
user = request.user
|
||
perms = get_permission_list(user)
|
||
data = {
|
||
'id': user.id,
|
||
'username': user.username,
|
||
'name': user.name,
|
||
'roles': user.roles.values_list('name', flat=True),
|
||
# 'avatar': request._request._current_scheme_host + '/media/' + str(user.image),
|
||
'avatar': user.avatar,
|
||
'perms': perms,
|
||
}
|
||
return Response(data)
|
||
|
||
class FileViewSet(CreateUpdateModelAMixin, ModelViewSet):
|
||
"""
|
||
文件-增删改查
|
||
"""
|
||
perms_map = None
|
||
parser_classes = [MultiPartParser, JSONParser]
|
||
queryset = File.objects.all()
|
||
serializer_class = FileSerializer
|
||
filterset_fields = ['type']
|
||
search_fields = ['name']
|
||
ordering = ['-create_time']
|
||
|
||
def perform_create(self, serializer):
|
||
fileobj = self.request.data.get('file')
|
||
name = fileobj._name
|
||
size = fileobj.size
|
||
mime = fileobj.content_type
|
||
type = '其它'
|
||
if 'image' in mime:
|
||
type = '图片'
|
||
elif 'video' in mime:
|
||
type = '视频'
|
||
elif 'audio' in mime:
|
||
type = '音频'
|
||
elif 'application' or 'text' in mime:
|
||
type = '文档'
|
||
instance = serializer.save(create_by = self.request.user, name=name, size=size, type=type, mime=mime)
|
||
instance.path = settings.MEDIA_URL + instance.file.name
|
||
instance.save()
|